CVE-2007-2383 The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data....
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| prototypejs prototype framework | = 1.5.1_rc3 | No fix listed |
| debian/asterisk(Debian:14) | < 1:1.6.2.0~rc3-1 | 1:1.6.2.0~rc3-1 |
| debian/asterisk(Debian:14) | = 0.1.11-3 | No fix listed |
| debian/asterisk(Debian:14) | = 0.1.11-3woody1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-2 | No fix listed |
Show 96 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-rc1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-rc2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1bpo1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.11.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.12.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.15~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.16~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.17~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6+b1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-7 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.9.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.10~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.13~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.15~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.16.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.16.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.17~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.17~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.18.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.18~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.19.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.20~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny2.1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3.1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.3~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.5~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.6~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.8~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.8~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.9~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.1.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.1.0~dfsg~rc3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~dfsg~beta3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~dfsg~rc1-1 | No fix listed |
| debian/jscropperui(Debian:12) | < 1.2.1-1 | 1.2.1-1 |
| debian/jscropperui(Debian:13) | < 1.2.1-1 | 1.2.1-1 |
| debian/jscropperui(Debian:14) | < 1.2.1-1 | 1.2.1-1 |
| debian/libhtml-prototype-perl(Debian:12) | < 1.48-3 | 1.48-3 |
| debian/libhtml-prototype-perl(Debian:13) | < 1.48-3 | 1.48-3 |
| debian/libhtml-prototype-perl(Debian:14) | < 1.48-3 | 1.48-3 |
| debian/symfony(Debian:12) | < 1.0.21-1.1 | 1.0.21-1.1 |
| debian/symfony(Debian:13) | < 1.0.21-1.1 | 1.0.21-1.1 |
| debian/symfony(Debian:14) | < 1.0.21-1.1 | 1.0.21-1.1 |
References
- dev.rubyonrails.org
- prototypejs.org
- 37677 third-party-advisory
- DSA-1952 vendor-advisory
- www.fortifysoftware.com url-repurposed
- Debian Security Tracker CVE-2007-2383 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking